106 matches found
CVE-2010-0904
CVE-2010-0904 affects Oracle Secure Backup Administration Server 10.3.0.1. The authentication bypass in login.php can be leveraged (with uname) to bypass authentication, and, in conjunction with a command-injection path in property_box.php, may allow remote arbitrary code execution. Public refere...
Oracle Secure Backup Authentication Bypass/Command Injection Vulnerability
This module exploits an authentication bypass vulnerability in login.php in order to execute arbitrary code via a command injection vulnerability in propertybox.php. This module was tested against Oracle Secure Backup version 10.3.0.1.0 Win32. Module Options msf use...
IBM WebSphere Application Server Stax XMLStreamWrite安全绕过漏洞
Bugraq ID: 35741 CVE ID：CVE-2009-0904 CNCVE ID：CNCVE-20090904 IBM WebSphere Application Server是一款商业性质的WEB应用服务程序。 IBM WebSphere Application Server Stax XMLStreamWrite存在安全绕过问题，远程攻击者可以利用漏洞通过SOAP请求绕过部分安全限制修改数据并发送。 目前没有详细漏洞细节提供。 IBM Websphere Application Server 6.1.2 IBM Websphere Application Server 6...
CVE-2009-0904
The CVE-2009-0904 issue affects IBM WebSphere Application Server 6.1 before 6.1.0.25, specifically the Stax XMLStreamWriter in the Web Services component. The root cause is improper XML encoding handling, which can allow remote attackers to bypass access controls and potentially modify data via X...
Fedora Update for bind FEDORA-2008-0904
Check for the Version of bind OpenVAS Vulnerability Test Fedora Update for bind FEDORA-2008-0904 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Microsoft Windows GDI+ BMP File Parsing Integer Overflow (MS08-052; CVE-2004-0904; CVE-2008-3015)
Bitmap BMP is an image file format used to store bitmap digital images. A remote code execution vulnerability has been discovered in the way GDI+ handles integer calculations for BMP files. The vulnerability is due to a buffer overflow when GDI+ fails to properly processes a malformed header in a...
FreeBSD Ports: thunderbird
The remote host is missing an update to the system as announced in the referenced advisory. VID ab9c559e-115a-11d9-bc4a-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-0904
CVE-2008-0904 affects BEA Plumtree Collaboration (4.1 through SP2) and AquaLogic Interaction (4.2 through MP1). The issue is an unspecified vulnerability in the download servlet that allows remote attackers to read arbitrary files via a crafted URL. The NVD entry lists a high impact with CVSS2 ba...
Fedora 7 : dar-2.3.4-1.fc7 (2007-0904)
Adding CVE reference Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
CVE-2007-0904
CVE-2007-0904 : SQL injection in LightRO CMS 1.0, exploitable through the ID parameter to index.php in projects.php. The vulnerability stems from improper handling of the ID input, enabling remote attackers to execute arbitrary SQL commands (impact: partial confidentiality/integrity/availability ...
CVE-2005-0904
CVE-2005-0904 affects Windows XP SP1 Remote Desktop. The issue is that the system does not verify the setting “Force shutdown from a remote system,” which allows a remote attacker to shut down the host by executing TSShutdn.exe. The vulnerability details in the connected data confirm this behavio...
CVE-2005-0904
Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe...
Non-administrators can shut down Windows XP SP1 thru TSShutdn.exe (889323)
The version of Microsoft Windows XP SP1 on the remote host is missing security update KB889323. A non-administrative user can remotely shut down the remote host by using the TSShutdn.exe command. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17607;...
CVE-2004-0904
Integer overflow in the bitmap BMP decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows...
CVE-2004-0904
Integer overflow in the bitmap BMP decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows...
CVE-2004-0904
CVE-2004-0904 : Integer overflow in the BMP decoder can trigger heap-based buffer overflows, enabling remote code execution. Affected products are Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8. Remediation is to apply fixes/updates released after the...
MS04-002: Exchange Privilege Escalation (832759)
The remote host is running an unpatched version of Microsoft Exchange that could allow an attacker with a valid Exchange account to access another user's mailbox using Outlook for Web Access C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11989; scriptversion"1.39";...
CVE-2003-0904
Summary: CVE-2003-0904 affects Microsoft Exchange Server 2003 with Outlook Web Access (OWA) when NTLM is used. A flaw in HTTP connection reuse between front-end and back-end servers (NTLM-authenticated OWA) can cause a user to be connected to another user’s mailbox if Kerberos is disabled or fall...
CVE-2002-0904
Affected software: Kismet 2.2.1 and earlier. Vulnerability: The SayText function permits remote command execution by injecting shell metacharacters (backtick or pipe) in the essid argument. Impact (as stated): Remote attackers could execute arbitrary commands via the essid field. Remediation / de...